查询账户密码{ Version: 2012-10-17, Statement: [ { Sid: ReadDatabasePassword, Effect: Allow, Action: [ ssm:GetParameter ], Resource: arn:aws-cn:ssm:cn-northwest-1:你的账户ID:parameter/cc/mysql/password } ] }如果成功DB_PASSWORD$(aws ssm get-parameter \ --name RDS-Password \ --with-decryption \ --query Parameter.Value \ --output text \ --region cn-northwest-1) cat /opt/cc/server.ini EOF [mysql] dsnadmin:${DB_PASSWORD}tcp(1:3306)/cc_app EOFAmazonSSMManagedInstanceCore允许 EC2 把监控指标和日志发送到 CloudWatchCloudWatchAgentServerPolicy